$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0843de91-d74d-3d95-a319-4ab610e27a02.roa File: 0843de91-d74d-3d95-a319-4ab610e27a02.roa (raw, json) Hash identifier: CB9ybHEFYdiLGSxX9fjS2qAAi1GFKYyu92nQ2jrxqzY= Subject key identifier: 47:A8:CD:6A:A0:96:AF:85:63:63:62:7D:FD:CF:63:C4:13:52:01:75 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584E9BE50E7ABC39FA2F83678960 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0843de91-d74d-3d95-a319-4ab610e27a02.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 213305 IP address blocks: 38.188.112.0/20 maxlen: 24 154.17.82.0/23 maxlen: 24 206.148.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:0e:7a:bc:39:fa:2f:83:67:89:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=bb978f03-ff78-435e-9eec-4b5a8ef0f94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:ea:e1:50:7a:26:2a:da:e7:a8:a8:d9:94: 65:c1:47:5a:4c:8b:e6:0a:7d:4f:bd:0f:fa:39:95: 6d:a8:44:1b:1a:0f:dd:76:1d:f3:54:aa:cf:62:60: f9:ce:78:33:54:64:60:61:09:d4:52:cc:d1:2b:70: bd:e1:30:a3:26:cc:6d:b9:1e:f7:3c:be:77:15:9d: 23:b5:51:c0:41:34:8c:26:4b:f2:d6:41:bd:7e:5e: aa:d2:4e:ee:30:de:b9:0b:47:5b:37:3e:78:bf:d5: f1:09:3b:7d:f7:7e:a3:6d:16:87:33:5e:44:c9:a0: 31:fc:25:fc:7f:3f:dd:e9:9c:47:29:8a:55:9f:9d: 0c:a3:fc:85:bc:f1:2b:fb:31:d8:eb:9e:d7:22:f5: f2:1e:6b:86:cc:03:97:de:ba:2c:55:1f:d6:77:e7: 37:24:5e:e7:20:7d:e5:c7:ff:51:43:a9:f3:cf:0f: 97:34:f3:52:e3:4a:78:19:39:2c:68:cf:76:ed:10: 02:a7:35:bd:d9:ae:e0:27:3b:4d:5b:b6:02:33:69: b5:4a:f2:a7:a2:19:76:96:4f:63:ea:38:33:1c:14: bc:52:ac:ab:e3:a7:05:a5:95:5c:5f:f4:29:f6:36: 3e:77:b2:12:4a:bc:75:33:92:27:04:9e:83:9f:ad: 17:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A8:CD:6A:A0:96:AF:85:63:63:62:7D:FD:CF:63:C4:13:52:01:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0843de91-d74d-3d95-a319-4ab610e27a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.188.112.0/20 154.17.82.0/23 206.148.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:74:7f:1b:f0:49:42:87:f5:25:aa:d5:ee:38:e9:99:6d:42: db:60:b0:11:4e:50:14:72:48:89:68:80:c5:46:3d:c4:4c:2a: ec:43:ec:89:1c:15:bc:71:6a:ac:a4:8a:ad:1e:93:15:a4:b0: 9c:cf:e0:d1:c9:01:35:5a:f5:43:85:64:a0:61:0b:19:58:74: aa:7c:95:95:bb:96:25:d6:f3:42:e7:bb:c7:f4:d3:c7:11:0d: 85:39:9c:1d:8a:d8:c2:87:b0:07:ed:60:33:9c:8d:07:04:89: 20:69:d7:1f:c9:dc:67:23:e1:a7:5b:b2:70:0d:63:a3:b6:13: d3:04:50:fa:0b:58:13:92:bf:b7:34:b1:ca:bb:e3:b4:4e:8f: 54:40:2a:e1:c7:c1:0d:e8:11:2b:f1:7b:c8:26:c9:05:94:fc: b9:64:3f:9d:b7:e2:f5:24:0d:ad:38:25:80:5c:5b:7a:9f:b4: ab:d1:f7:4e:72:fe:45:0d:27:40:6f:f9:e5:db:1e:0a:cb:ac: 39:70:2d:96:b7:55:cf:c7:76:05:6c:25:05:cd:e4:a3:29:ec: a5:1a:45:52:26:8a:1b:1d:71:f8:8b:23:cb:36:79:82:3b:ad: 40:03:b2:a7:4b:0b:64:0d:cc:f4:61:8d:22:dd:76:24:e1:f2: 5f:87:67:e2 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6b5Q56vDn6L4NniWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk YmI5NzhmMDMtZmY3OC00MzVlLTllZWMtNGI1YThlZjBmOTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNrq4VB6Jira56io2ZRlwUdaTIvmCn1PvQ/6 OZVtqEQbGg/ddh3zVKrPYmD5zngzVGRgYQnUUszRK3C94TCjJsxtuR73PL53FZ0j tVHAQTSMJkvy1kG9fl6q0k7uMN65C0dbNz54v9XxCTt9936jbRaHM15EyaAx/CX8 fz/d6ZxHKYpVn50Mo/yFvPEr+zHY657XIvXyHmuGzAOX3rosVR/Wd+c3JF7nIH3l x/9RQ6nzzw+XNPNS40p4GTksaM927RACpzW92a7gJztNW7YCM2m1SvKnohl2lk9j 6jgzHBS8Uqyr46cFpZVcX/Qp9jY+d7ISSrx1M5InBJ6Dn60XawIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEeozWqglq+FY2Niff3PY8QTUgF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDg0M2RlOTEtZDc0ZC0z ZDk1LWEzMTktNGFiNjEwZTI3YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEJrxwAwQB mhFSAwQBzpQCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALV0fxvwSUKH9SWq1e446ZltQttgsBFOUBRySIlo gMVGPcRMKuxD7IkcFbxxaqykiq0ekxWksJzP4NHJATVa9UOFZKBhCxlYdKp8lZW7 liXW80Lnu8f008cRDYU5nB2K2MKHsAftYDOcjQcEiSBp1x/J3Gcj4adbsnANY6O2 E9MEUPoLWBOSv7c0scq747ROj1RAKuHHwQ3oESvxe8gmyQWU/LlkP5234vUkDa04 JYBcW3qftKvR905y/kUNJ0Bv+eXbHgrLrDlwLZa3Vc/HdgVsJQXN5KMp7KUaRVIm ihsdcfiLI8s2eYI7rUADsqdLC2QNzPRhjSLddiTh8l+HZ+I= -----END CERTIFICATE-----Generated at Tue Jul 28 00:20:40 2026 by rpki-client